On Thu, 2010-08-26 at 09:18 -0400, Bram Cymet wrote: > Yes I could write a script to get the CRL distribution point from the > cert and periodically download the CRL but I was wondering if kerberos > already has this feature built in? I'm pretty sure we don't have this feature.